Description
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
28a326c592e3e444c59f28b3e60c3b07692928d6 to < d05ba46134d07e889de7d23cf8503574a22ede09affected28a326c592e3e444c59f28b3e60c3b07692928d6 to < cfa9148bafb2d3292b65de1bac79dcca65be2643affected28a326c592e3e444c59f28b3e60c3b07692928d6 to < b8fab6aebdf2115ec2d7bd2f3498d5b911ff351eaffected28a326c592e3e444c59f28b3e60c3b07692928d6 to < e6825b30d37fe89ceb87f926d33d4fad321a331eaffected28a326c592e3e444c59f28b3e60c3b07692928d6 to < c0d7dbc6b7a61a56028118c00af2c8319d44a682affected28a326c592e3e444c59f28b3e60c3b07692928d6 to < 2e1be420b86980c25a75325e90dfc3fc73126f61affected28a326c592e3e444c59f28b3e60c3b07692928d6 to < 25e634d7f44eb13113139040e5366bebe48c882faffected28a326c592e3e444c59f28b3e60c3b07692928d6 to < f828b681d0cd566f86351c0b913e6cb6ed8c7b9caffected
Linux Linux
Default version status: affected
3.13affected0 to < 3.13unaffected4.14.324 to ≤ 4.14.*unaffected4.19.293 to ≤ 4.19.*unaffected5.4.255 to ≤ 5.4.*unaffected5.10.192 to ≤ 5.10.*unaffected5.15.123 to ≤ 5.15.*unaffected6.1.42 to ≤ 6.1.*unaffected6.4.7 to ≤ 6.4.*unaffected6.5 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d05ba46134d07e889de7d23cf8503574a22ede09 ↗
- https://git.kernel.org/stable/c/cfa9148bafb2d3292b65de1bac79dcca65be2643 ↗
- https://git.kernel.org/stable/c/b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e ↗
- https://git.kernel.org/stable/c/e6825b30d37fe89ceb87f926d33d4fad321a331e ↗
- https://git.kernel.org/stable/c/c0d7dbc6b7a61a56028118c00af2c8319d44a682 ↗
- https://git.kernel.org/stable/c/2e1be420b86980c25a75325e90dfc3fc73126f61 ↗
- https://git.kernel.org/stable/c/25e634d7f44eb13113139040e5366bebe48c882f ↗
- https://git.kernel.org/stable/c/f828b681d0cd566f86351c0b913e6cb6ed8c7b9c ↗